Listening to NPR this morning reminded me how much of the cyber security discussion is like classic crime reporting, focused very much on symptoms rather than causes. Let's take a step back and ask what the OPM hack tells us:

The discussion about privacy in the great surveillance debate reminded me of an event where an organization promised the audience to keep our privacy safe from “government,” showing a slide on a big screen with the NSA seal and a hand grasping something – it may have...

If we are lucky, not a lot, at least not right away. Big terrorist operations take a few months to plan and potential attackers probably won't believe the US will do something this dumb to itself until it actually happens. A...

All developed nation states are proceeding with physical identity programs, particularly with research and development (R&D) in academic institutions. Besides the United States, some other major players are China, Germany, and the United Kingdom.

In thinking about what needs to change now that the commercial internet has reached 20 years, one big challenge is legitimacy - are the institutions that "govern the internet seen as legitimate by a global user population?